Code

New Detection Artifacts#463

Code

Merged

doomedraven merged 10 commits intoCAPESandbox:masterCAPESandbox/community:masterfrom para0x0dise:new-detection-artifactspara0x0dise/community:new-detection-artifactsCopy head branch name to clipboardOct 28, 2024

+1,040

Commits

Commits on Oct 28, 2024

• Adding new artifacts related to LOLBAS binaries

  para0x0dise

  committed
  04cb15b

  Copy full SHA for 04cb15b

• Add a new artifact to detect STOP/DJVU ransomware

  para0x0dise

  committed
  7e983b1

  Copy full SHA for 7e983b1

• Adding new artifacts with generic detection mechanisms

  para0x0dise

  committed
  d89003e

  Copy full SHA for d89003e

• Add new artifact to detect if PowerShell history is deleted

  para0x0dise

  committed
  a2f4247

  Copy full SHA for a2f4247

• Add new artifact to bypass UAC

  para0x0dise

  committed
  3d9b59b

  Copy full SHA for 3d9b59b

• Add new artifact to access Vault Passwords

  para0x0dise

  committed
  10b161b

  Copy full SHA for 10b161b

• Add new artifact to detect dumping LSASS dumps and abuse Kerberos protocol

  para0x0dise

  committed
  d13fc25

  Copy full SHA for d13fc25

• Add another artifact to escalate privilege using printer spooler

  para0x0dise

  committed
  9fe283f

  Copy full SHA for 9fe283f

• Add new artifact to detect escalate privilege using named pipes

  para0x0dise

  committed
  7650eaa

  Copy full SHA for 7650eaa

• Add new artifacts to detect abusing of Windows Utilities

  para0x0dise

  committed
  da15180

  Copy full SHA for da15180